Data Protection Impact Assessment

From MSc Voice Technology
Revision as of 14:36, 7 September 2023 by MattColer (talk | contribs) (Created page with "In this session we will simulate a Data Protection Impact Assessment (DPIA). This will be done in the form of a role-play game. We count on your active participation, preparation, and activity for this exercise to be a great success! * Read for preparation the material on [https://sites.google.com/rug.nl/privacy-in-research/cases#h.fv8ldf4pt09c Voice recognition and Parkinson's]. * Watch [https://www.youtube.com/watch?v=H3WFEfieLm4 this short video]. * Study the conce...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

In this session we will simulate a Data Protection Impact Assessment (DPIA). This will be done in the form of a role-play game. We count on your active participation, preparation, and

activity for this exercise to be a great success!

Preparation material

Material for the roleplay case on Voice recognition and Parkinson's

Take the following steps to prepare before the roleplay:

  1. Study the case and role card for your role and get into your role by visualising your character. Use the following questions: What kind of person is he/she? What does he/she want to achieve? Who asked him/her to join?
  2. Study the questions on the role card and check which key concept cards are relevant for your role.
  3. Keep in mind that the aim of the roleplay is to work together on privacy by design. So, think how you can contribute in a constructive way.


In the week before the session a role will be assigned to you. There are nine roles:

  1. Researcher
  2. Information security expert
  3. Legal Know-how
  4. Research data management expert
  5. Communications professional
  6. Representative of the data subjects
  7. Ethics know-how
  8. Representative of the insurance company
  9. PhD supervisor

Aim of the assignment

  1. Discuss the risk(s) for the data subjects.
  2. Decide which technical or organizational measures should be taken to protect personal data. Take into consideration how the measures can be transparent.
  3. Develop a common conclusion whether the research should be carried out.


Recommended: To understand the background and the setting better, please prepare your participation by looking at the e-learning material on ‘privacy in research’. You can access it via the

Future Learn platform using this link.


This is high quality material that was developed at the UG to inform the users about essential

questions relating to privacy in research. Remember it also when you develop your projects later.